T09 · Insecure Skill Coding Practices
Warning
- Location
dashboard/index.html:655- Finding
Unrestricted iframe inspector discloses DOM and form data to untrusted parent origins
- Content
View full analysis
50 ? text.substring(0, 50) + "..." : text; } ``` It also collects every attribute from the selected element: ```javascript function getElementAttributes(element) { var attrs = {}; for (var i = 0; i < element.attributes.length; i++) { var attr = element.attributes[i]; attrs[attr.name] = attr.value; } return attrs; } ``` The collected information includes element text, attributes, selector, geometry, complete page URL, path, and timestamp: ```javascript var elementInfo = { tagName: target.tagName.toLowerCase(), rect: { left: rect.left, top: rect.top, right: rect.right, bottom: rect.bottom, width: rect.width, height: rect.height, x: rect.x, y: rect.y }, selector: selector, text: text, attributes: attributes, url: win ...[truncated 6224 chars]- Remediation
View remediation